DNS Reconnaissance: AQUATONE

DNS Reconnaissance AQUATONE is a set of tools for performing reconnaissance on domain names. It can discover subdomains on a given domain by using open sources as well as the more common subdomain dictionary brute force approach. After subdomain discovery, AQUATONE can then scan the hosts for...

DATA - Credential Phish Analysis and Automation

Credential Phish Analysis and Automation BUCKLEGRIPPER py Given a suspected phishing url or file of line separated urls, visit, screenshot, and scrape for interesting files. Requirements can be installed by running or reviewing installbucklegripperdeps.sh usage: bucklegripper.py -h -u URL -s SOUR...

Harvest: [platform.harvestapp.com] Reflected XSS in Error Message via URL parameters

Hi @jorgeleria, I came across a potential reflected XSS vector while exploring platform.harvestapp.com functionality. At present, I have been unable to locate a functional payload, so would like to report this as HTML injection. Proof of Concept Steps to reproduce 1. Visit the below Demonstration...

Stealthy Konni RAT Targeting North Korea Since 2014

Two recent espionage campaigns against political and strategic targets in North Korea has been linked to malware that has stayed hidden for the better part of three years. Cisco’s research arm Talos published a report yesterday on the malware it calls Konni. Two attacks in April used phishing...

WordPress: Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter

Hello - You have a reflected XSS vulnerability located at this domain: https://da.wordpress.org/themes/?s= This was tested on the latest version of Chrome Version 57.0.2987.133 64-bit By entering this payload in the URL, you are able to execute a script to fire:...

Huawei P6 Elevation of Privilege Vulnerability

The Huawei P6 is a smartphone from the Chinese company Huawei Huawei.The EDGE-U00, EDGE-T00 and EDGE-C00 are among the versions... The Huawei P6 suffers from an elevation of privilege vulnerability. An attacker can exploit the vulnerability to perform a screenshot operation, resulting in the...

CVE-2016-5059

CVE-2016-5059 involves OSRAM SYLVANIA Osram Lightify Home. The CNVD entry (CNVD-2017-12298) describes it as a vulnerability in versions up to 2016-07-26 where the application fails to implement SSL pinning, enabling a man-in-the-middle attacker to intercept SSL/TLS traffic from the affected syste...

Kaspersky: In App purchase Hack

I have downloaded kaspersky internet security from the playstore and it asks for free version or trial version and i have given trial version then i got 7 days free pack,After that i used with the help of lucky patcher and freedom app i can able to byepass without money i can able to purchase 365...

Car Workshop System - SQL Injection

Car Workshop System - SQL Injection Car Workshop System, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: N/A Injection point:...

Country on Sale Script - SQL Injection

Country on Sale Script - SQL Injection Country on Sale Script, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display, you can use time-based blind Google...

Joomla! Component Simple Membership 3.3.3 - 'userId' Parameter SQL Injection

Joomla! Component Simple Membership 3.3.3 - the 'userId' Parameter SQL Injection Joomla! Component Simple Membership 3.3.3, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you tu...

Uploadr - Project Files Management /search of SQL injection

Uploadr - Project Files Management /search of the presence of SQL injection Injection point: http://download.lagunaproperty.com/search?keyword=SQL error-based payload: /search? keyword=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716b717871,SELECT ELT4271=4271,1,0x7170707071,0x78s,...

Uploadr - Project Files Management /download at SQL injection

Uploadr - Project Files Management /download at the presence of SQL injection Injection point: http://download.lagunaproperty.com/download?file=SQL error-based payload: /download? file=1%' AND SELECT 2IFSELECT FROM SELECT CONCATmd5233,0x716a767a71,SELECT ELT4943=4943,1,0x7176716b71,0x78s,...

Joomla com_product v2. 2 parameters main_proid SQL injection vulnerability

Joomla comproduct 2.2 SQL injection Vulnerability Joomla comproduct 2.2, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display can be used based on the...

BrainDamage - A fully featured backdoor that uses Telegram as a C&C server

A python based backdoor which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul [email protected] -- Github: https://github.com/mehulj94 -- Twitter: https://twitter.com/wayfarermj -- For windows only | | | | | | | | | / / | | | | | '/ / |...

Nlance - Freelance Marketplace Software v2.2 - SQL Injection

Nlance - Freelance Marketplace Software v2. 2 - SQL Injection Nlance - Freelance Marketplace Software v2. 2, The presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: N/A...

Joomla! Component Guesser v1.0.4 - SQL Injection

Joomla! Component Guesser v1. 0. 4 - SQL Injection Joomla! Component Guesser v1. 0. 4, There is parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: inurl:index. php? option=comguesser...

Trend Micro Deep Discovery Email Inspector screenshot Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within screenshot.php. The issue results from the lack of proper...

Joomla! Component Spinner 360 v1.3.0 - SQL Injection

Joomla! Component Spinner 360 v1. 3. 0 - SQL Injection Joomla! Component Spinner 360 v1. 3. 0, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display can ...

Joomla! Component OneVote! v1.0 - SQL Injection

Joomla! Component OneVote! v1. 0 - SQL Injection results. in php electionid parameters into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/components/comonevote/results. php? electionid=SQL union injected payload: +/! 50000union/+select+@@version-- - Test...